Database
WordPress Vulnerability Database (page 1439)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
<1.2.42Update to 1.2.42
- Medium4.3Cross-Site Request Forgery
Search Everything
<8.1.1Update to 8.1.1
- Critical9.8Authentication Bypass
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<1.1.60Update to 1.1.60
- Medium6.1Reflected Cross-Site Scripting
WP Affiliate Platform
≤6.3.8Update to 6.3.9
- Medium4.3Cross-Site Request Forgery
TinyMCE Color Picker
<1.2Update to 1.2
- High7.5Sensitive Information Disclosure
Acumbamail
<1.0.4.1Update to 1.0.4.1
- Medium5.5Stored Cross-Site Scripting
NextCellent Gallery – NextGEN Legacy
<1.9.18Update to 1.9.18
- High7.53.9.001 - Missing Authorization
iMember360is
3.8.012 – <3.9.001Update to 3.9.001
- Medium6.1Cross-Site Scripting
Contact Bank – Contact Form Builder for WordPress
≤2.0.19Update to 2.0.20
- High7.5Missing Authorization and Sensitive Data Exposure
iMember360is
<3.9.001Update to 3.9.001
- Medium5.3Missing Authorization
TinyMCE Color Picker
≤1.1Update to 1.2
- Medium6.1Reflected Cross-Site Scripting
Keyword Strategy Internal Links
≤2.0No patch available
- Medium6.1Cross-Site Scripting
wp-easybooking
≤1.0.3No patch available
- Medium6.1Cross-Site Scripting
flash-photo-gallery
≤0.7No patch available
- Medium6.1Cross-Site Scripting
WP eBay Product Feeds
<1.1Update to 1.1
- High7.1Cross-Site Scripting
Game tabs
≤0.4.0No patch available
- Critical9.8Arbitrary File Upload
Echelon
all versionsNo patch available
- Medium6.1Cross-Site Scripting
flog
≤0.1No patch available
- High8.83.9.001 - Cross-Site Request Forgery
iMember360is
3.8.012 – <3.9.001Update to 3.9.001
- High7.23.9.001 - Remote Code Execution
iMember360is
3.8.012 – 3.9.001Update to 3.9.002
- High7.2Remote Code Execution
File Gallery
<1.7.9.2Update to 1.7.9.2
- Medium5.3Full Path Disclosure
Ad Blocking Detector
≤1.2.1Update to 1.2.2
- Medium6.1Cross-Site Scripting
WP Js External Link Info
≤1.21No patch available
- High8.8Cross-Site Request Forgery
SEO Plugin LiveOptim
≤1.1.3Update to 1.1.4
- High8.8Cross-Site Request Forgery
FunCaptcha – Anti-Spam CAPTCHA
<0.3.3Update to 0.3.3
- High7.1Reflected Cross-Site Scripting
Unconfirmed
<1.2.5Update to 1.2.5
- Medium5.5Stored Cross-Site Scripting
Twitget
≤3.3.2Update to 3.3.3
- Medium6.4Stored Cross-Site Scripting
Lazyest Gallery
<1.1.21Update to 1.1.21
- Critical9.6Multiple Cross-Site Request Forgery
Backup, Restore and Migrate your sites with XCloner
<3.1.1Update to 3.1.1
- High7.2SQL Injection
WordPress
3.8.1 – 3.8.1Update to 3.8.2